In CTF (Capture The Flag) competitions and security assessments, exploiting permission flaws and improper configurations of tools like rsync is a recurring technique for privilege escalation. These...
Abstract This article delves into the exploitation of Bash globbing vulnerabilities within a web application’s authentication system. By dissecting a real-world scenario, we demonstrate how such v...
Abstract This article delves into the technique of command injection as a means to escalate privileges within Linux systems. Using an illustrative scenario, we analyze how malicious manipulation of...
Abstract This article explores the exploitation of a Cross-Site Scripting (XSS) vulnerability within a Content Management System (CMS), demonstrating how such a flaw can be leveraged to achieve Rem...
Abstract This article examines the process of cracking Bcrypt hashes using the Hashcat tool, demonstrating its application in a controlled security scenario. We discuss the structure of Bcrypt hash...
Extracting Passwords from Pixelated Images Using Depix In various security environments, attempts are often made to conceal sensitive information like passwords using visual obfuscation techniques...
Brute-Forcing Credentials and Exploiting Weak Authentication Weak authentication mechanisms can be exploited by attackers to gain unauthorized access through brute-force techniques. This approach ...
Configuration File Analysis and Resource Download WebAssembly-based applications use a configuration file that contains essential information about the resources required for execution in the brow...
IIS (Internet Information Services) servers are widely used to host websites and web applications in Windows environments. When an IIS server is configured to host a development site, it can presen...
Service Exposure and SSRF Vulnerabilities Server-Side Request Forgery (SSRF) is a critical vulnerability that allows an attacker to manipulate a server into making requests to internal or even exte...